DevSecOps Engineer - Security Protocols

<p><p><b>WHO ARE WE LOOKING FOR?

(Job Summary) :</b><br/><br/>We are seeking a DevSecOps Security Engineer with a focus on OWASP, MITRE, SOC 2, and NIST philosophy and compliance.

The candidate should have experience with GitHub, GitHub Actions, Dependabot, Azure, and AWS with at least basic familiarity with PHP and Ruby on Rails.<br/><br/><b>LOCATION :</b><br/><br/>Indore, India (on-site)<br/><br/><b>Responsibilities :</b><br/><br/>- Develop and maintain DevSecOps practices and tools to ensure security and compliance.<br/><br/>- Implement and enforce OWASP, MITRE, SOC 2, and NIST security best practices and frameworks.<br/><br/>- Conduct security assessments, vulnerability scans, and penetration testing.<br/><br/>- Collaborate with development teams to integrate security into the CI/CD pipeline and automate security testing and compliance checks.<br/><br/>- Manage and maintain security tools, including WAFs, IDS/IPS, and vulnerability scanners.<br/><br/>- Respond to security incidents and perform root cause analysis.<br/><br/>- Stay up-to-date with the latest security threats, trends, and technologies.<br/><br/><b>Requirements :</b><br/><br/>- BS/MS in Computer Science, Information Security, or a related field.<br/><br/>- 5-8 years of experience in DevSecOps, security engineering, or a related field.<br/><br/>- Familiarity with OWASP, MITRE, SOC 2, and NIST security frameworks and best practices.<br/><br/>- At least basic familiarity with PHP and Ruby on Rails development.<br/><br/>- Experience with GitHub, GitHub Actions, and Dependabot for code management and security.<br/><br/>- Experience with Azure and AWS for infrastructure management and security.<br/><br/>- Understanding of security compliance and regulatory requirements.<br/><br/>- Problem-solving, communication, and collaboration skills.<br/><br/>- Experience with security tools, including WAFs, IDS/IPS, and vulnerability scanners.<br/><br/>- Incident response and root cause analysis experience.<br/><br/><b>Preferred Qualifications :</b><br/><br/>- CISSP, CISA, or related certification.<br/><br/>- Experience with containerization and orchestration technologies, especially Kubernetes.<br/><br/>- Experience with IaC tools.<br/><br/>- Familiarity with DevOps practices.<br/><br/><b>HOW WE WILL TAKE CARE OF YOU :</b><br/><br/>- Medical & Life insurance<br/><br/>- Motivating compensation<br/><br/>- Paid Holidays<br/><br/>- Great working environment<br/><br/>- Rapid career development opportunities<br/></p><br/></p> (ref:hirist.tech)